Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-50981

AppScanSourceBuilder persists PrintStream to the disk (JEP-200)

XMLWordPrintable

      According to the code inspection, there is a JEP-200 issue in the plugin:

      This code likely causes a JEP-200 security exception when the object gets persisted to the disk. "java.io.PrintStream" is not whitelisted in Jenkins for a reason, because loggers are not expected reliably after being deserialized from the disk.

      Useful links about JEP-200:

            kevinfealey Kevin Fealey
            oleg_nenashev Oleg Nenashev
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: